Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 15:59:08.064 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56064 10 6452 1 2025-09-05 15:54:24.089 00:06:00.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 15:59:30.681 00:00:10.368 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:00:08.278 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54344 10 6452 1 2025-09-05 16:00:31.107 00:00:10.326 TCP 23.104.0.1:42068 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:01:08.492 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-09-05 16:01:31.472 00:00:10.372 TCP 23.104.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:02:08.668 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53428 10 6452 1 2025-09-05 16:02:31.898 00:00:10.703 TCP 23.104.0.1:33256 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:03:08.884 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57244 10 6452 1 2025-09-05 16:03:38.611 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:03:38.619 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:03:32.647 00:00:10.323 TCP 23.104.0.1:37484 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:04:09.085 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53108 10 6452 1 2025-09-05 15:59:24.089 00:06:00.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 16:04:33.008 00:00:10.358 TCP 23.104.0.1:57702 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:05:09.258 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35846 10 6452 1 2025-09-05 16:05:33.409 00:00:10.361 TCP 23.104.0.1:40124 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:06:09.467 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34788 10 6452 1 2025-09-05 16:01:24.092 00:06:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 16:06:33.812 00:00:10.369 TCP 23.104.0.1:52706 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:07:09.648 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:53834 11 6504 1 2025-09-05 16:07:34.219 00:00:10.366 TCP 23.104.0.1:41968 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:08:09.922 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:34766 10 6452 1 2025-09-05 16:08:38.751 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:08:38.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:08:34.622 00:00:10.373 TCP 23.104.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:09:10.122 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56670 10 6452 1 2025-09-05 16:09:35.030 00:00:10.361 TCP 23.104.0.1:54456 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:10:10.338 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56412 10 6452 1 2025-09-05 16:10:35.429 00:00:10.363 TCP 23.104.0.1:35126 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:11:10.550 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55338 10 6452 1 2025-09-05 16:06:24.091 00:06:00.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 16:11:35.834 00:00:10.341 TCP 23.104.0.1:53812 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:12:10.769 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-09-05 16:12:36.219 00:00:10.378 TCP 23.104.0.1:34554 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:13:10.978 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:35570 10 6452 1 2025-09-05 16:08:24.094 00:06:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 16:13:39.068 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:13:39.180 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:13:36.652 00:00:10.367 TCP 23.104.0.1:41244 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:14:11.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36610 10 6452 1 2025-09-05 16:14:37.059 00:00:10.364 TCP 23.104.0.1:40300 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:15:11.383 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-09-05 16:15:37.463 00:00:10.323 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:16:11.542 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-09-05 16:16:37.824 00:00:10.324 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:17:11.760 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53084 10 6452 1 2025-09-05 16:17:38.187 00:00:10.371 TCP 23.104.0.1:51412 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:13:24.092 00:06:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 16:18:11.972 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6452 1 2025-09-05 16:18:39.046 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:18:39.197 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:18:38.591 00:00:10.365 TCP 23.104.0.1:39116 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:19:12.206 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52294 10 6452 1 2025-09-05 16:19:38.994 00:00:10.333 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:15:24.094 00:06:00.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 16:20:12.415 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45172 10 6452 1 2025-09-05 16:20:39.371 00:00:10.323 TCP 23.104.0.1:37484 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:21:12.624 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44378 10 6452 1 2025-09-05 16:21:39.736 00:00:10.371 TCP 23.104.0.1:53402 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:22:12.834 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54948 10 6452 1 2025-09-05 16:22:40.142 00:00:10.362 TCP 23.104.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:23:13.010 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-09-05 16:23:39.725 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:23:39.658 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:23:40.545 00:00:10.365 TCP 23.104.0.1:41068 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:24:13.237 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-09-05 16:24:40.947 00:00:10.379 TCP 23.104.0.1:39354 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:20:24.093 00:06:00.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 16:25:13.451 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38366 10 6452 1 2025-09-05 16:25:41.363 00:00:10.370 TCP 23.104.0.1:52472 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:26:13.659 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38424 10 6452 1 2025-09-05 16:26:41.789 00:00:10.365 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:22:24.096 00:06:00.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 16:27:13.833 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-09-05 16:27:42.190 00:00:10.324 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:28:14.083 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33830 10 6452 1 2025-09-05 16:28:39.207 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:28:39.460 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:28:42.555 00:00:10.363 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:29:14.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-09-05 16:29:42.957 00:00:10.370 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:30:14.516 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6452 1 2025-09-05 16:30:43.374 00:00:10.370 TCP 23.104.0.1:42866 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:31:14.698 00:00:10.448 TCP 1.101.0.1:3000 -> 22.102.0.1:57838 10 6452 1 2025-09-05 16:31:43.782 00:00:10.370 TCP 23.104.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:32:15.186 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41906 10 6452 1 2025-09-05 16:27:24.094 00:06:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 16:32:44.190 00:00:10.368 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:33:15.354 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40666 10 6452 1 2025-09-05 16:33:39.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:33:39.302 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:33:44.597 00:00:10.375 TCP 23.104.0.1:56960 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:29:24.097 00:06:00.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 16:34:15.569 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52004 10 6452 1 2025-09-05 16:34:45.013 00:00:10.364 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:35:15.782 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 10 6452 1 2025-09-05 16:35:45.418 00:00:10.371 TCP 23.104.0.1:45318 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:36:15.951 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42456 10 6452 1 2025-09-05 16:36:45.827 00:00:10.377 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:37:16.180 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 10 6452 1 2025-09-05 16:37:46.241 00:00:10.361 TCP 23.104.0.1:35984 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:38:16.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37810 10 6452 1 2025-09-05 16:38:39.239 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:38:39.386 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:38:46.641 00:00:10.377 TCP 23.104.0.1:53630 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:39:16.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54100 10 6452 1 2025-09-05 16:34:24.095 00:06:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 16:39:47.062 00:00:10.359 TCP 23.104.0.1:57536 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:40:16.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36056 10 6452 1 2025-09-05 16:40:47.464 00:00:10.360 TCP 23.104.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:36:24.099 00:06:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 16:41:17.041 00:00:10.433 TCP 1.101.0.1:3000 -> 22.102.0.1:54318 10 6452 1 2025-09-05 16:41:47.870 00:00:10.366 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:42:17.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40962 10 6452 1 2025-09-05 16:42:48.277 00:00:10.366 TCP 23.104.0.1:57264 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:43:17.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44312 10 6452 1 2025-09-05 16:43:39.451 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:43:39.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:43:48.687 00:00:10.370 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:44:17.942 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-09-05 16:44:49.114 00:00:10.362 TCP 23.104.0.1:43112 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:45:18.173 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36474 10 6452 1 2025-09-05 16:45:49.516 00:00:10.325 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:41:24.097 00:06:00.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 16:46:18.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-09-05 16:46:49.882 00:00:10.382 TCP 23.104.0.1:45368 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:47:18.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48596 10 6452 1 2025-09-05 16:47:50.299 00:00:10.366 TCP 23.104.0.1:59846 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:43:24.100 00:06:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 16:48:18.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37020 10 6452 1 2025-09-05 16:48:39.683 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:48:39.738 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:48:50.702 00:00:10.326 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:49:19.046 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39114 10 6452 1 2025-09-05 16:49:51.096 00:00:10.365 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:50:19.259 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44114 10 6452 1 2025-09-05 16:50:51.497 00:00:10.325 TCP 23.104.0.1:60224 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:51:19.473 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33906 10 6452 1 2025-09-05 16:51:51.861 00:00:10.371 TCP 23.104.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:52:19.682 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37794 10 6452 1 2025-09-05 16:52:52.274 00:00:10.364 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:48:24.099 00:06:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 16:53:19.903 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54322 10 6452 1 2025-09-05 16:53:39.883 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 16:53:39.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:53:52.677 00:00:10.366 TCP 23.104.0.1:53154 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:54:20.139 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-09-05 16:54:53.104 00:00:10.320 TCP 23.104.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:50:24.101 00:06:00.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 16:55:20.365 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46998 10 6452 1 2025-09-05 16:55:53.459 00:00:10.378 TCP 23.104.0.1:39724 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:56:20.571 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49286 10 6452 1 2025-09-05 16:56:53.883 00:00:10.344 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:57:20.785 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33864 10 6452 1 2025-09-05 16:57:54.265 00:00:10.369 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-09-05 16:58:20.998 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 10 6452 1 2025-09-05 16:58:39.515 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 16:58:39.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 160, total bytes: 496770, total packets: 1560, avg bps: 1030, avg pps: 0, avg bpp: 318 Time window: 2025-09-05 15:54:24 - 2025-09-05 16:58:39 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0012s User: 0.0024s Wall: 0.0013s flows/second: 123543.6 Runtime: 0.0013s